On a class of adversarial classification problems which admit a continuous solution

Abstract

We consider a class of adversarial classification problems in the form of zero-sum games between a classifier and an adversary. The latter is able to corrupt data, at the expense of some optimal transport cost. We show that quite general assumptions on the loss functions of the classifier and the transport cost functions of the adversary ensure the existence of a Nash equilibrium with a continuous (or even Lipschitz) classifier's strategy. We also consider a softmax-like regularization of this problem and present numerical results for this regularization.